Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E6D27B4D3DC11EF92E60BBF762E951A.roa
File: 2E6D27B4D3DC11EF92E60BBF762E951A.roa (raw, json)
Hash identifier: VN+YM1aPrs+5BUMbTPO/ikQfyhgXGXI+7I1UXw+J4N4=
Subject key identifier: F2:D4:65:71:A7:C2:1F:64:5C:78:FE:B9:8D:CC:B5:88:AF:80:F1:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0108CE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E6D27B4D3DC11EF92E60BBF762E951A.roa
Signing time: Thu 16 Jan 2025 07:33:30 +0000
ROA not before: Thu 16 Jan 2025 07:33:26 +0000
ROA not after: Thu 20 Feb 2025 07:33:26 +0000
asID: 395886
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67790 (0x108ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 16 07:33:26 2025 GMT
Not After : Feb 20 07:33:26 2025 GMT
Subject: CN=6788b64a-9e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:68:6c:84:49:b3:12:9c:ee:8a:99:ba:12:74:
dc:d0:ac:34:94:90:2a:72:77:b4:00:4e:1c:58:f5:
e1:4a:0e:bd:c6:a8:3e:75:9e:8c:1e:82:f5:f0:7c:
02:04:26:aa:37:41:8a:6d:70:b1:75:b8:3a:07:72:
26:e4:08:70:1e:b2:a2:0a:f1:43:84:b4:11:06:28:
cd:aa:3c:01:61:3d:2a:be:c0:11:3d:e3:36:2b:e9:
90:77:94:c1:90:87:ee:f5:c1:23:9d:a6:30:f0:58:
3e:28:49:58:d6:02:f9:bc:79:5a:0b:a8:ae:d4:46:
74:de:a8:bf:56:8b:9b:4d:42:e0:2c:1b:60:1b:48:
90:d1:ed:2e:7f:d4:82:33:61:c8:d2:23:04:28:bb:
04:3f:dd:24:4e:68:bb:bf:fc:9e:dc:58:0a:01:18:
64:29:e8:21:52:1a:3d:4d:a5:6d:3d:4e:c2:c3:93:
e2:53:9f:3c:f6:ed:5d:ae:3d:b9:68:29:86:c2:7a:
9c:61:be:df:6a:1e:ce:a8:86:46:df:ef:85:73:e1:
04:a4:e7:ef:ce:f8:eb:21:e1:ed:7a:bf:23:37:28:
79:58:66:a4:e7:02:bf:c1:82:44:cd:dd:9e:86:37:
c1:22:dc:33:51:a3:96:90:94:76:aa:2a:f7:a1:9e:
64:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D4:65:71:A7:C2:1F:64:5C:78:FE:B9:8D:CC:B5:88:AF:80:F1:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E6D27B4D3DC11EF92E60BBF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
68:e8:10:42:e0:b7:73:60:70:4c:5a:6d:0e:81:d5:37:d1:b3:
07:3a:79:e8:ac:f0:6a:6b:0b:9b:fc:b8:6f:c0:0b:9b:7b:56:
9b:77:b7:6d:db:da:4f:9b:d9:90:d0:6d:e8:13:fc:82:95:cd:
da:60:2c:ce:48:92:b6:2c:e2:8a:77:92:b6:d7:0e:bd:c7:8b:
c7:2b:62:ca:0f:b5:4b:69:07:8c:03:6b:c5:6a:2f:01:aa:2b:
39:0a:ed:53:27:12:34:a8:dc:10:8c:4d:a1:5f:27:ec:ee:e5:
49:db:9d:68:83:67:fa:42:4d:8b:d3:2e:4a:70:a3:6a:46:10:
70:c9:92:98:c2:a5:ac:de:7d:5f:f2:a4:66:00:e1:1a:b1:3b:
7f:44:be:19:0b:d5:aa:46:1f:9e:c0:3d:16:d4:23:b8:9b:5c:
ab:53:c3:40:3d:e4:88:b0:6e:8f:ab:52:9d:01:0e:4b:b1:21:
2c:dc:9f:eb:86:27:df:ff:6f:93:4d:48:57:64:bb:bc:60:9d:
62:7f:a2:19:7a:57:30:4c:ac:6a:8b:e6:19:83:21:ad:b0:9f:
68:22:3a:36:fd:54:53:a6:37:2b:38:39:ec:af:a8:45:58:1c:
b7:90:6d:f1:b5:1e:73:ab:5b:a5:ec:f5:5e:7c:cf:a7:21:37:
73:12:d9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:14:22 2025 by rpki-client